CLAIMS 



1 1 . A system for delivering institutional data to a customer, comprising: 

2 an institutional server, wherein the institutional server includes a system for separately 

3 serving a first database containing private data and a second database containing public data; 

4 a service provider, wherein the service provider includes a system for receiving an 

5 encrypted version of the private data and an unencrypted version of the public data; and 

6 a chent, wherein the client includes a system for displaying a merged version of the 

7 r=v| private and pubUc data. 

1 ■ !| 2, The system of claim 1, wherein the chent includes a mechanism for decrypting the 

2 '% encrypted private data. 

fll 

1 ^^3 3. The system of claim 1, further comprising a system for making the customer anonymous 

2 I'"! to the service provider. 

1 4. The system of claim 3, wherein the system for making the customer anonymous to the 

2 service provider includes a mechanism for determining a service level available to the 

3 customer. 

1 5. The system of claim 1, wherein the service provider includes a system for analyzing the 

2 use of the public data by the customer without knowing an identity of the customer. 
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1 6. The system of claim 1 , wherein the merged version of the private and public data is 

2 downloaded to the chent by the service provider. 

1 7. The system of claim 1, wherein the private and pubhc data are downloaded to the client by 

2 the institutional server and service provider, respectively. 

1 8. The system of claun 1 , wherein the encrypted version of the private data is encrypted 
2 using a public key infrastructure protocol. 

, 

1 9. The system of claim 1, wherein the client includes an interface that can be customized into 

2 a first window for viewing the pubhc data and a second window for viewing the private data. 



rii 
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1 1 0. A method of preserving privacy between a customer and an institution in a computer 

2 network environment, comprising the steps of: 

3 separating data associated with the institution into a first database of private data and 

4 a second database of pubhc data; 

5 storing an encrypted copy of the private data and an unencrypted copy of the public 

6 data with an intermediary service provider; 

7 providing to the customer a security system that allows the customer to decrypt the 

8 encrypted data and remain anonymous to the intermediary service provider; 

9 merging the encrypted copy of the private data and the unencrypted copy of the public 

10 ^^ 'f data; and 

1 1 providing an interface that allows the customer to view the merged data. 

1 Q 1 1 . The method of claim 1 0, wherein the security system includes a public key infrastructure 

2 protocol. 

1 12. The method of claim 10, comprising the further step of customizing the interface to 

2 include a first window for viewing the pubUc data and a second window for viewing the 

3 private data. 

1 13. The method of claim 10, wherein the pubhc data includes data available extemally to the 

2 institution. 
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1 14. A method of preserving privacy between a customer and an institution in a computer 

2 network environment, comprising the steps of: 

3 separating data associated with the institution into a first database of encrypted private 

4 data and a second database of public data; 

5 loading an unencrypted copy of the public data to a service provider; 

6 loading to a client the encrypted private data from the institution and the unencrypted 

7 copy of the public data from the service provider; 

8 providing to the customer a security mechanism that allows the customer to decrypt 

9 Q the encrypted data and remain anonymous to the service provider; and 

10 , providing an interface that allows the customer to view the encrypted copy of the 

1 1 ;k private data and the unencrypted copy of the pubHc data. 

1 15. The method of claim 14, wherein the security mechanism includes a public key 

2 "'^^ infrastructure protocol. 

1 16. The method of claim 14, comprising the fiirther step of customizing the interface to 

2 include a first window for viewing the pubhc data and a second window for viewing the 

3 private data. 

1 17. The method of claim 14, wherein the pubhc data includes data available extemally to the 

2 institution. 
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1 1 8, A program product stored on a recordable medium that when executed, preserves privacy 

2 between a customer and an institution in a computer network environment, comprising: 

3 a system for separating data associated with the institution into a first database of 

4 encrypted data and a second database of unencrypted data; 

5 a system for providing a copy of the second database of xmencrypted data to an 

6 intermediary service provider; 

7 an interface that allows the customer to view the first database of encrypted data and 

8 the copy of the second database of unencrypted data provided to the intermediary service 

9 r;| provider; and 

10 a security system that allows the customer to decrypt the encrypted data and remain 

1 1 | anonymous to the intermediary service provider. 

1 i;;3 19. The program product of claim 18, further comprising: 

2 -'"^ a system for providing a copy of the first database of unencrypted data to the 

3 intermediary service provider. 
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